Google Accused of Bypassing Safari's Privacy Controls 202
DJRumpy points out an article (based on a possibly paywalled WSJ report) describing how Google and other ad networks wrote code that would bypass the privacy settings of Apple's Safari web browser. 'The default settings of Safari block cookies "from third parties and advertisers," a setting that is supposed to only allow sites that the user is directly interacting with to save a cookie (client side data that remote web servers can later access in subsequent visits). ... The report notes that "Google added coding to some of its ads that made Safari think that a person was submitting an invisible form to Google. Safari would then let Google install a cookie on the phone or computer.' Google says this mischaracterizes what the code does, claiming it simply enables 'features for signed-in Google users on Safari who had opted to see personalized ads and other content — such as the ability to “+1” things that interest them.' Google adds that the data transferred between Safari and Google's servers was anonymized. John Battelle writes that the WSJ's story is sensationalist, but that it raises good questions about the practices of ad networks as well as Apple's efforts to stymie industry-standard practices.
Re:And people ask me why I don't use Chrome (Score:5, Informative)
If you're running DNSmasq just add this line:
address=/google-analytics.com/127.0.0.1
and it won't bother you again.
I trust google as much as microsoft (Score:2, Informative)
http://duckduckgo.com/ [duckduckgo.com]
Safari has a long history of cookie problems (Score:5, Informative)
IIRC the first 3 major versions of Safari on OS X totally ignored the setting for 'don't allow 3rd party cookies'. I had to file a bug that apple.com was setting these cookies w/ safari.
These assertions are really empty for me personally, since apple's site has partners that set these cookies, and apple's devs couldn't bother to implement this feature right.
And yes, my bitterness permeates everything:)
Re:And people ask me why I don't use Chrome (Score:5, Informative)
another cool trick is to set up a host file.
http://winhelp2002.mvps.org/hosts.htm [mvps.org]
Re:And people ask me why I don't use Chrome (Score:5, Informative)
You *can* do a system-wide installation, it's just not obvious [google.com].
Re:And people ask me why I don't use Chrome (Score:5, Informative)
Re:And people ask me why I don't use Chrome (Score:5, Informative)
If it was properly locked down, the Chrome installer wouldn't be able to run at all. And if it able to run, then it doesn't need an exploit.
Re:And people ask me why I don't use Chrome (Score:4, Informative)
(Silly question, but I'm no Windows admin -- isn't there an equivalent of the "noexec" mount option, to prevent any binaries within certain subtree of the filesystem from being executed?)
Yes. I don't know exactly how it's done, but I know it can be done, since the public computers on my university prevent it.
Google tells me it's called a Software Restriction Policy [microsoft.com].
Fight back with surrogates (Score:4, Informative)
Surrogate Scripts [hackademix.net] are meant to deal with this kind of crap.
Could you please show me some URLs to check?